Privacy notice

Last updated 15 Oct 2026. This notice covers revamoney.xyz, Reva Learn and the Reva web app.

What we collect, and why

• Membership application: name, email, city, what you do, and optionally your asset range, what you hold and who referred you. Purpose: to review your application and email you about it. Stored in a private database run for us by Supabase, Inc. in Mumbai, India. If you don’t join, we delete it within 12 months, or earlier if you ask.
• Sign-in: your email address, and your name and profile picture if you sign in with Google. Purpose: to identify you and keep you signed in. Reva doesn’t see your Google password and doesn’t read your Gmail, contacts or files.
• Your household: the names you enter for yourself, family members and your household. Purpose: to group your accounts and show them by person.
• Statements you add: fund names, ISINs, units, values and masked folio numbers. Purpose: to build your net worth and run the agents you turn on. The statement PDF and its password are used only in your browser; Reva never receives the file. Stored in Mumbai, India.
• Agents: the briefs you write, their findings and the notes they keep. Purpose: to run the agents you turn on. When an agent runs, the data it is allowed to read is sent to an AI model provider outside India to write the finding; nothing is kept there for training.
• Consent records: what you agreed to, which version of this notice, and when. Purpose: to show we had your consent, as the DPDP Act requires.
• Reva Learn: email, age, lesson progress and XP. Only if you choose to save your progress. Stored in your browser on your device.
• Preferences: chat history, theme and layout. Stored in your browser.

We do not use advertising or tracking cookies, analytics tools or third-party trackers. We use only the cookies and browser storage needed to keep you signed in and remember your settings.

Account and statement data

Bank, demat and mutual fund data will come only through the RBI’s Account Aggregator network after you approve a consent request, or from statements you choose to upload. Each consent shows what is shared and for how long, and you can revoke it. Reva will never ask for your bank or broker passwords. This feature is not live yet; we will update this notice and ask for your consent before it is.

Who we share it with

We don’t sell your data or share it for advertising. We use Supabase (database and sign-in, Mumbai region), Vercel (hosting) and Google (only if you choose Google sign-in). They process data only on our instructions. People you give access to, such as your partner or CA, see only the households you share with them. We disclose data to authorities only when the law requires it.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how it is used;
• ask us to correct, complete or update it;
• withdraw your consent and ask us to erase it (in Reva Learn, use Delete my data);
• nominate someone to exercise these rights if you die or cannot do so yourself;
• raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.

Withdrawing consent is as easy as giving it, and does not affect anything done before you withdrew.

Children

Reva Learn accounts are only for people aged 18 and over. We do not knowingly collect personal data from children, and we do not track children or show them targeted advertising.

How long we keep data

Data stored in your browser stays until you delete it or clear your browser data. Data on our servers is kept while your account is open and erased within 30 days after you close it or withdraw consent, unless a law requires us to keep it longer.

Contact and grievances

Email privacy@revamoney.xyz. We will acknowledge your request and respond within 90 days, as the DPDP Rules require.

This notice is available in English. To receive it in another language listed in the Eighth Schedule to the Constitution, write to us at the address above.